Yeah, once I asked Tutanota's customer service, and they told me it would only be from my end if I click any link or provide the OTP to a phishing site. But nowadays I am seeing everyone recommending passkey as they say TOTP is not safe. I'm really not sure why they're saying this; are they making us extra panicking?